URLhaus Database

You are currently viewing the URLhaus database entry for http://yangmassage.net/cgi-bin/http:/Z6FFM5CXT0LY/0zMBmJSEkt09/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:452972
URL: http://yangmassage.net/cgi-bin/http:/Z6FFM5CXT0LY/0zMBmJSEkt09/
URL Status:Offline
Host: yangmassage.net
Date added:2020-09-04 02:33:07 UTC
Last online:2020-09-16 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-04 02:34:26 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:12 days, 0 hours, 26 minutes Bad (down since 2020-09-16 03:00:50 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-05Dat-Q6487.docdoc 4c3f9a91ab8bd67a7de8b61f6d5e49c34a0c3ded123f63205f02d17ff570c204Virustotal results 30.00%Heodo
2020-09-058753-20200905-DO259363.docdoc 8abd1fd956a522b05535b6b9ddb53a6c4353e20235979a9ed05679ac4f2a95caVirustotal results 29.31%Heodo
2020-09-05Dat-2020_09_05-RWC493.docdoc e598cf9a18d4db4fa8174ec8f921eb470f8b844063cec6fa35185f7f8f1d2b4bVirustotal results 30.00%Heodo
2020-09-05DAT-2020_09_05-ZB17333.docdoc ddd8c361d3ca02b5ca803895bb6f365200b244f91cbde23f27b6af134ebedf5aVirustotal results 30.00%Heodo
2020-09-05FVU1026_2020_09_05_770507.docdoc 36db57afc7d4faa57d7bbd559db7ca4ae2bd483caacaa9fba1a3cc6839b240a3n/aHeodo
2020-09-05MES_20200905_JHZ644.docdoc c687016b2136760124efe54694e2980e93b56aa5278ec587b7290a01f02c93fdVirustotal results 30.51%Heodo
2020-09-05UNTITLED-20200905-8676717.docdoc 178548af9f561e5bf22a2a3bf689025f6219b073e79e56ea0b74f164dc02820eVirustotal results 29.51%Heodo
2020-09-051119437-20200905-470685.docdoc d4c076603f475a562c8771e360b65b734aba563731f4417b117ecfad4297d562Virustotal results 30.00%Heodo
2020-09-05Inf-2020_09_05-975.docdoc 0274b67e43f98e65033f7b7b9c341a6560e515e61187693dfa5b941a2545309fn/aHeodo
2020-09-05Dat_2020_09_05_4222411.docdoc ca1ecf3a84713ebe3b95b15bb7e7d4fe779daa81b1a2879feb79423222472ec8Virustotal results 29.51%Heodo
2020-09-05File 20200905 T594684.docdoc f71c39920ac9463b4be57b2c9ef5a795184d8adab4c0a8761d0d491ae6b5a140Virustotal results 30.00%Heodo
2020-09-05REP 20200905 MUM461679.docdoc 51da971ad054a7cc8d3a929c87eba819eed539387ca660dad760e7bcf2477562Virustotal results 28.33%Heodo
2020-09-05DAT 2020_09_05 TN330.docdoc a6861aa553541ef958ad8dbfff87e748c920813dd0b745d69787b2818357158aVirustotal results 30.00%Heodo
2020-09-05REP-2020_09_05.docdoc eda41409cac593fa280357f888dfed9313d45a2523ff59de058f32b76478d925Virustotal results 28.33%Heodo
2020-09-05arc 20200905.docdoc 5b82741c8587a1a90e3ce044387a541c69a916330391030a4daa50aa1db6a445Virustotal results 28.81%Heodo
2020-09-05File 2020_09_05 7398451.docdoc b647104789174776abced7dc5a7abaa47fa349c4b21749ca3b6634e4f039da4dVirustotal results 28.33%Heodo
2020-09-05doc 2020_09_05 K650005.docdoc b1d37441a65187f53492dcd30fe0d3fafb9de343694c7ac79d3ce5434cec9350n/aHeodo
2020-09-05FILE_2020_09_05_W582.docdoc 206feb1d69aba0e52a7d33975a49cc2a9443deb7bcf9fb4f8a6428ffcd95c97bVirustotal results 28.81%Heodo
2020-09-05file_54361.docdoc 0ca5df179f725a9c12ba1385711972c7e55bc02359435e954db6e65f1e2036fdVirustotal results 27.87%Heodo
2020-09-05Dat_OA854.docdoc ee2869e612b62baacd8f12266c98e851549e6789343a4020cc424755ae55326aVirustotal results 28.81%Heodo
2020-09-05list 2020_09_05 956706.docdoc c66ac5fc632592fd547d29b2ea0d58d6fd421effca802489611fb9a43a656a45Virustotal results 24.59%Heodo
2020-09-05Arc_2020_09_05.docdoc 4f193825cdb87bbefffaa5925f7b422f06f0add25d518ea4f874acc892641968Virustotal results 27.59%Heodo
2020-09-05file_69759.docdoc 0917f0cbca78c19301ba65aa799b29dcf90ee3666fc9f8b83f00c5ea34a0eba6Virustotal results 26.67%Heodo
2020-09-05801GRT_20200905_26829.docdoc 6914af81ae643d0106a7cb16454991e2b4d29053551e92e659456ad592120f57Virustotal results 26.23%Heodo
2020-09-05UNTITLED 20200905 T623972.docdoc f3c01505f223d53a856b4cbb5201b5cbad5706145be5e214e266f4570491a8ccVirustotal results 26.67%Heodo
2020-09-05Attachment-2020_09_05-AE3481.docdoc 2572ca226200ecc1019e9813f939d7484962a7f90ecc62921f7efb01e5bdefeaVirustotal results 24.56%Heodo
2020-09-058578755 540.docdoc d933cd9a8fdaa58bf021074d4dcbca7f3fed26971db346a66f8b2435afb70b50Virustotal results 22.03%Heodo
2020-09-05arc_4198.docdoc 08946ba696e1f6e1da7e3f5cc61273c6d9c2bc25f61ff89151213d62d4c8e625Virustotal results 21.67%Heodo
2020-09-05DAT_20200905.docdoc 349685f93e08324717dd09b79130205af7e095872a599905ac58c453d5a4f25eVirustotal results 21.67%Heodo
2020-09-05Attachment_20200905_NH603553.docdoc 3c51d26e98137dad5c907c872c1af3b0faea7094df4acb08d71d8873e8800a9dVirustotal results 21.31%Heodo
2020-09-05dat_503860.docdoc 22834da2a4895ae43256bc32fc3c6faa89ec4389406f7fd25032bedea74bda9fVirustotal results 21.67%Heodo
2020-09-05UNTITLED_2020_09_05_726.docdoc e5b5640cb999ccd3a5fa07ef28ecdb37ea16dbe142bd3cec619837a9c0c3baddn/aHeodo
2020-09-05Inf-2020_09_05-55576.docdoc 5d1e5bc11522b6d4daf399dbbd1a18561ee98aad33dce8f798e2aad3a2a5c329Virustotal results 22.03%Heodo
2020-09-05Arc 2020_09_05.docdoc ac03cec1ea7e2d4ba254b3225a617ff11bb93247cfd84340907d0533522327e4Virustotal results 22.03%Heodo
2020-09-04Mes.docdoc d9a9da6db3834089876251db68e72db8a21ff82ee58ca338a43a055110f793c4n/aHeodo
2020-09-04INF_2020_09_05_499166.docdoc be5a076cc07b81d54fda54ef3c56f2d60ee214c3d1fe46de3dc59a1df619dc29n/aHeodo
2020-09-04list_20200905.docdoc 88d669402f9cb6d3c39a7de76b5e16c45d5db2b7a4e5c5f2b9ec112d299f85d6Virustotal results 21.31%Heodo
2020-09-04LIP0302 WB177.docdoc 137b5a0cda220100df4caefac31efe6cc85c4bd72580fe2ce1987887901d3ed7Virustotal results 22.03%Heodo
2020-09-04mes.docdoc 0f264ea12ac1b1f96e80c683d7aabce629b15ded57f43e29a4faa7cbf057d673Virustotal results 22.03%Heodo
2020-09-04ARC-2020_09_05-N197355.docdoc a8e4d449c8018f90196d3de6e14d75cdca5c5f76b989880e012890f87d43f6c9Virustotal results 21.67%Heodo
2020-09-04rep-2020_09_05-EQI9196.docdoc 44f213e9ff99dece96ea33d94a4e46bb3e508480002c5e255d46ca711b44a9e3Virustotal results 19.30%Heodo
2020-09-04LIST 2020_09_05 533151.docdoc e3986d10ba408aefe9c0f44c298dafcd5501ea916fc093cbff42c479194a9309Virustotal results 20.00%Heodo
2020-09-04357LO 20200905 W53867.docdoc 17387deff7e3725fb0ae1aacebcb5e9be101e9ad64a337ce858202ef07458f1cVirustotal results 20.00%Heodo
2020-09-04UNTITLED QKN516.docdoc 4833c57c4ff48c2720247aa3bc9c8d62222f9fe3d095924030c344bfa8673847Virustotal results 20.69%Heodo
2020-09-04Doc_8392227.docdoc d22f6705c1735812ddadd90de20741627b3116e4f8f97de636b160757970fc90Virustotal results 20.34%Heodo
2020-09-04list_39610.docdoc 4ad62f2c57a013638168235884ebd78c0b024008e87c9b2e84719d7543132e4dn/aHeodo
2020-09-04ARC-2020_09_04-751406.docdoc 9f003b20287110dbbea8826454c0666aee189fbf57cb907e8cf072dfe3829b18n/aHeodo
2020-09-04Mes_139.docdoc bd6fabb51f037d2253220c55129be8125a21f63b579dd69ca9d82604f0208b60Virustotal results 20.34%Heodo
2020-09-04Attachment 20200904 M5003.docdoc 9c0798c3e8889889ef70b039545920afb91f1508144606704a1889286192bbf9Virustotal results 20.34%Heodo
2020-09-04List 20200904 372809.docdoc aa3db031e17cd90af00951bc4d86c18c8e42328f47e9014b552993ff1b29c557Virustotal results 20.34%Heodo
2020-09-04Inf_2020_09_04_UF8533.docdoc 623ee20c1b2e5a53a0bbf6eb21f4b87cb0e6392e023f1e08267abc08c26e5bbfn/aHeodo
2020-09-04list-7753.docdoc a253aef329c83499bce145efd31ae02cea4034649151064020f8db8f5e18901dVirustotal results 38.98%Heodo
2020-09-04dat_2020_09_04_0601605.docdoc 0cfb4e12de240822e52fa2d66698bdcfea13a994ccf47b7fa45634e0dfff294an/aHeodo
2020-09-04Dat_20200904_Z9967.docdoc 53e22a87b7381a9a4a9bea066f9d1b435964fddef4e38f321f372fe6abc16854Virustotal results 34.48%Heodo
2020-09-04Dat.docdoc 112b31f94d0408209223b109553273ff732fcd2f05b532c53d7ef7e4658bec80n/aHeodo
2020-09-04DAT_2020_09_04_Q298734.docdoc c567ea1fcaf384bfd2ad39165ea9b07fc04bfcbd325f7b3ecbe8c7329e65611cn/aHeodo
2020-09-04Doc.docdoc 9990dcb5b87f13e2c03f32484faaa9cbd123c53c9de007a6f49e879459e2ef24n/aHeodo
2020-09-04List 80319.docdoc 6f0b6b0222cea2d8ba538112fd54ca8a8bdff5682be620babe330264cca0858aVirustotal results 35.00%Heodo
2020-09-04REP-0755006.docdoc 8a87e7dcaf07545941e8f4859526c55f0b840dc1d051e86b09200a3a49ba5c01Virustotal results 35.00%Heodo
2020-09-04MES-2105.docdoc cc4f7c86201d0618e4cc76f2030913800e738cb4a46496daa65e8f3507b3e12dn/aHeodo
2020-09-04Untitled-2020_09_04-H0924.docdoc 270c40ed02166b3f9687722a922082abd182688cb3cc27d4f0f27ff8af729b53n/aHeodo
2020-09-04UNTITLED-2020_09_04-987168.docdoc 74f31456977a691fa6c56243890fd997e0ed0e2793ec4b6e1df8e8a0c93a22cfn/aHeodo
2020-09-04mes-20200904-EIT864932.docdoc 5f507662f25de9c594d9c295a8fcd49bab262c3b83c2a470ca2a0303834b57d1n/aHeodo
2020-09-04list 2020_09_04 M905.docdoc e4006ffd7617f48dca3ed5e7220e159de2160b07f86452e1fcb7fa0f27ed1d9aVirustotal results 35.59%Heodo
2020-09-04mes_20200904_450.docdoc 0cac10e553ca0da14b7f6e1bf4c0586be92226b4edb922d9d7a79fd366142df8n/aHeodo
2020-09-04ARC_20200904_0143927.docdoc 00a7e0634054721fe9f4467f8843d3558c3694215da05f6027c8444786c55d21Virustotal results 35.00%Heodo
2020-09-0425060 00437.docdoc 60417a3fac59e91bb0031c7e6fc97a808021296c159f11631bc3ac3e34ec5603Virustotal results 28.81%Heodo
2020-09-04doc.docdoc 088de2c93ca2a5d1c4e17cab469aa2ea619a58e4c03c744b338f74787e4dca86Virustotal results 30.51%Heodo
2020-09-04Doc.docdoc edbc22e742e12b2af45a775673812f2c751b4f9071a83b9565d3d547fa380655Virustotal results 30.00%Heodo
2020-09-04Arc 2020_09_04 IL549.docdoc be6a2393d8d58557a21737649e0977851d793862f1b80f1d27a1ee2ee70b3154Virustotal results 30.00%Heodo
2020-09-044564Y-QZ40157.docdoc d7452abd23b4d0a252d67436bea5f98b177d6d4a707ce10ce71852940cf97a3cVirustotal results 28.33%Heodo
2020-09-041553-2020_09_04-EEQ88580.docdoc c3850d62a95518f0ec62ce9f3f83163aa67b240ac7b21a8b6e1bf5e24005a4d0Virustotal results 28.33%Heodo
2020-09-04UNTITLED 2020_09_04.docdoc 533b65838696f229623a8367b9367b80001a7af8125899e324d550f4b4c64456Virustotal results 26.67%Heodo
2020-09-04list_2020_09_04_9340.docdoc 794287d8176f07c6943cc4ca303d03de2ec84b37ff7262e148c0451087177c86Virustotal results 27.12%Heodo
2020-09-04INF-20200904-TV9155.docdoc d0faa29d011a7abe3a5e2d03346780cebd6a5dc766e52241014b96e58b4a99d7n/aHeodo
2020-09-04Inf-GVI117.docdoc 006573a1a4acf93e1940fd56fea0e62fa51082d6e0209689974721fc1b3f9f7dVirustotal results 25.42%Heodo
2020-09-04list-934.docdoc 3e0a5ec179e243321f58a84f26f80b56360e394bea0576cb2d6afdf21f0e6595Virustotal results 25.00%Heodo
2020-09-04Attachment_20200904_429.docdoc 52a1f3085fece2adb5e447183da5a37ab0c90019b2237702ce65ead6ba03cf96Virustotal results 23.73%Heodo
2020-09-04UNTITLED_2020_09_04_GLS291.docdoc f7347d7eb634ea2c2bdeb69d026c099ca12acf563a5b6681e6467ce9c7260619n/aHeodo
2020-09-04Inf_2020_09_04.docdoc 5e01f376491f37354db3791f6ec1c53893e852d5874971655f2b8c0c9bfa35cdn/aHeodo
2020-09-04file_20200904_002.docdoc 50b57183a110a184c3028a10dfc67efbf04a18c1afe062e8ecf4b92694fbad23Virustotal results 26.67%Heodo
2020-09-04Untitled_20200904_3038617.docdoc c737b9843d1bd4e6071bdecec3832cb009922c322cb71ca5b8fb1f3af0febbc1Virustotal results 25.42%Heodo
2020-09-04UNTITLED 20200904 333.docdoc 8c4a8a1c7d4ddbfd0b727a5f169b6bc78e7997fd2b0947299d663a215bb3a9d9Virustotal results 27.12%Heodo
2020-09-04List_2020_09_04_52224.docdoc 9896f6412623c9c75887ccf147bc7461f10527fbfb3463272f2086e56cc0b645n/aHeodo
2020-09-04Untitled 524570.docdoc 4749d3ccec3b04f83f45466cc89c6ac00f1c8c24c60c3784c38e9b478dca0aaaVirustotal results 25.86%Heodo
2020-09-04ARC-20200904-4036.docdoc 6b12df90c4f1f8bdf2bcc412748ab826992ecf7c8f1d6dff2768fff19be85236Virustotal results 26.67%Heodo
2020-09-04File 20200904 3003276.docdoc 9da9e2af16844a3b0fc49e496b6a88773ebb122ac1471d654d696c4417c6c5d7n/aHeodo
2020-09-04747UFA 20200904 X55198.docdoc e514ee40aaf58363f83b55c5bb9e01e591be5d5fbea0402363bfe659405e331aVirustotal results 25.00%Heodo
2020-09-04FILE_20200904_H060.docdoc 5c3e085b8dc0398471b039b43d850dc0dd50acd421707eb3296026e53b65d5a9Virustotal results 23.33%Heodo
2020-09-04INF_MI8271.docdoc edf870edb55e5142744c18f6834fdb1518565ccaca223c5375787ae927ef4a3eVirustotal results 22.41%Heodo
2020-09-04429_UP304443.docdoc a44af5b41212998f1fbe2710a20194236275ea73fe20d136c36ab549738d00eaVirustotal results 22.95%Heodo
2020-09-04Dat.docdoc bbb72c4df6c036dd3b187c18c6ba7bf547ed934e658bdcd5d3c23d14d244c2eaVirustotal results 22.95%Heodo
2020-09-04dat 2020_09_04 K206.docdoc 20c2046e2adf35a55ffe9f2c18069d578882d4225b49533e7e3e48f1c04cce09Virustotal results 23.73%Heodo
2020-09-04Mes_P10419.docdoc d9c975b6db619552db6df9461b3c0947dbeb829698591386f2c86994a414e005Virustotal results 23.33%Heodo
2020-09-04inf LF6803.docdoc dd4feaa43e89898264a8512b2339c67fb1207b97e5c6c216fe656ff6234c0098n/aHeodo
2020-09-04list-20200904.docdoc 970e16cc8aabea583a577bb3ca6a50b795357231ff02822fafb8aa7dd143667fVirustotal results 22.03%Heodo
2020-09-04list-2020_09_04-LMV6764.docdoc b73bf6b8c71126f090ffbab7009d10d3841a42ef4ea96a8c2450a8179a8df736n/aHeodo
2020-09-04INF_20200904_2003.docdoc 4e3917d545fe670b0ea8dd1cf91701595c3cbe5ab87b5c53a826514778bad6f6n/aHeodo
2020-09-04Doc 20200904 9477220.docdoc d310bc1324e7bd2e09dde5482cc4390a66257737f2da4ce7c2bc2f05d04663d7Virustotal results 42.37%Heodo
2020-09-04List_20200904_QOS3615.docdoc 12faca932c77d851b530ebd1ee39f12e9c7b755904fb11fa61fd7acb92afdf62Virustotal results 40.00%Heodo
2020-09-04Attachments-2020_09_04-E6274.docdoc acb81dc6508ccc95393a57308575ed700b2dca51e4f0658f6ce9dacfd214dd3fVirustotal results 40.68%Heodo
2020-09-04list 2020_09_04.docdoc 0ff1c95a7d850d74903fb10610c4d99e54fd900d51cad0f2deda82e1122f403cVirustotal results 40.00%Heodo
2020-09-04DAT-2020_09_04-5053708.docdoc a7f7db7e743de3993fe73005b54d739c61d8b922446cf434ecedcca82c63e922Virustotal results 40.00%Heodo
2020-09-04LIST_20200904_383045.docdoc 05558fbc6250f15d45880b5ebfb3798d415fad3e982b503fd6b61e658d902aaeVirustotal results 40.68%Heodo
2020-09-04INF 2020_09_04 990.docdoc b928a4ea1aae65b1c3ee2634f0d4d3bba7d8f0d7bd647c3befb30ba0f8b6a1abVirustotal results 41.38%Heodo
2020-09-04Rep-2020_09_04-684971.docdoc 7f52e258980628fde30f218b911a2e930d0bb7245dbe6093e35eaf7e61c3e688Virustotal results 40.00%Heodo
2020-09-04DAT 20200904 0160.docdoc 886d63b614006458acc2c30f3864476e896c318a90248243fabf63f0e992f712Virustotal results 40.00%Heodo
2020-09-04Mes-2020_09_04.docdoc 4808444c5d5d505fcdfe5814913d92dea2c41dbd68018cff2817cabd134441a6Virustotal results 41.67%Heodo
2020-09-04Attachments 20200904 UPH419.docdoc 352ed1583217d011b59331d9df7069fb05bffbee3823ffe2603a5cd74f16b850Virustotal results 41.38%Heodo
2020-09-04Rep-20200904-4845.docdoc 90d7013803edb798ee2da7fcf3de07420ccd536dd01c96d0c787a80c0923f08dVirustotal results 40.00%Heodo
2020-09-04dat-W56968.docdoc 113f271d566b508aed976158e057211703fe30c314960665466fe58d9e08e50bVirustotal results 40.00%Heodo
2020-09-04Dat 2020_09_04 R878.docdoc 3b921395ead4db8129425113780d7d7391058b9a70f1bfadaa36d56c48de30edVirustotal results 40.00%Heodo
2020-09-04file 2020_09_04 OFL063608.docdoc 595e8a24f2e5e51e56138296f7c6cd58e709e8f532dbacc38ae66f462e0e071dVirustotal results 40.00%Heodo